SGS Technical Service

The service is comprised of a service catalog based on cloud computing services that organizes technology management into five key areas: Service Desk, for support and incident response; Requirements Management, for standard operational requests; Change Management, which controls planned modifications; Configuration Management, which maintains resource inventory and traceability; and Evolutionary Development, focused on continuous improvement, automation, and innovation in the cloud.

Below you can see the services in our catalog:

• Incident handling and recording: Reception, categorization, and follow-up of technical and functional incidents.
• Access and account support: Access management, password recovery, and MFA setup.
• Proactive Monitoring and Alerts: Monitoring the health of services and infrastructure.
• Remote Assistance: Remote support for troubleshooting or configuration.
• Virtual Machine Provisioning: Create instances on demand based on capacity policies.
• Database creation: Implementation and configuration of relational or non-relational databases.
• Request for additional storage: Capacity expansion on disks, buckets, or file systems.
• Environment Access Request: Enabling access to Dev, QA, and Prod environments.
• Request for new cloud services: Evaluation and addition of new services to the portfolio.
• Change in network configuration: Adjustment of subnets, security groups or load balancers.
• Resource migration between zones: Moving or replicating instances for high availability.
• Planned maintenance window: Scheduled infrastructure interventions.
• Configuration Audit: Evaluating compliance with policies and standards.
• Application development and deployment: Design, coding, testing, and continuous deployment.
• CI/CD Automation: Implementing continuous integration and delivery pipelines.
• Cost and resource optimization: Consumption analysis, scaling adjustment, and recommendations.
• Development, Maintenance and Evolution of Artificial Intelligence and Machine Learning applications.
• Review of findings in Security Hub, GuardDuty, and Inspector that automation could not resolve on its own.
• Verification that the Systems Manager patching cycle and AWS Backup backups ran without errors.
• Review AWS Budgets and Trusted Advisor to detect "phantom spending" or underutilized resources.
• Research and design of improvements (e.g., migrating to Graviton, implementing VPC Endpoints, new WAF rules).
• Configure a dashboard in CloudWatch to unify GuardDuty and Inspector alerts.
• Using Systems Manager Automation generates immediate corrections to changes that affect the security posture.